CVE-2020-8973criticalCWE-284

CVE-2020-8973: fallo crítico en ZGR TPS200 NG

ZGR TPS200 NG Improper access control

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear ZGR TPS200 NG

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.3epss 0.5%
ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, does not properly accept specially constructed requests. This allows an attacker with access to the network where the affected asset is located, to operate and change several parameters without having to be registered as a user on the web that owns the device.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Productos afectados
ZGR · ZGR TPS200 NG
CVEs relacionadas — ZGR TPS200 NG

En el mismo producto, de las más peligrosas a las menos.

CVE-2020-8975HIGHZGR TPS200 NG Information ExposureEPSS 1.3%CVE-2020-8974CRITICALZGR TPS200 NG Missing Reference to Active Allocated ResourceEPSS 0.8%CVE-2020-8976CRITICALZGR TPS200 Cross-Site Request Forgery (CSRF)EPSS 0.6%